Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
133121	6.5	警告 Network	レッドハット日立	Hitachi Ops Center Common Services Red Hat Single Sign-On Keycloak	keycloak における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2020-27838	2021-10-14 11:05	2020-12-11	Show	GitHub Exploit DB Packet Storm

133122	5.9	警告 Network	日立 Bouncy Castle	Bouncy Castle Crypto package for Java Hitachi Ops Center Common Services Bouncy Castle FJA Bouncy Castle FIPS .NET …	複数の Bouncy Castle 製品における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2020-15522	2021-10-14 11:05	2020-07-4	Show	GitHub Exploit DB Packet Storm

133123	5.4	警告 Network	SolarWinds	Serv-U	SolarWinds Serv-U におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-35482	2021-10-13 18:03	2020-12-21	Show	GitHub Exploit DB Packet Storm

133124	9.8	緊急 Network	Nim-lang	Nim	Nim におけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2020-15690	2021-10-13 18:03	2020-07-2	Show	GitHub Exploit DB Packet Storm

133125	6.1	警告 Network	JetBrains	Hub	JetBrains Hub におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2021-25757	2021-10-13 17:56	2021-02-3	Show	GitHub Exploit DB Packet Storm

133126	7.2	重要 Network	OpenSolution	Quick.CMS Quick.Cart	Quick.CMS および Quick.Cart におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2020-35754	2021-10-13 17:52	2020-12-28	Show	GitHub Exploit DB Packet Storm

133127	5.4	警告 Network	Testes de Codigo	Testes de Codigo	Testes de Codigo におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-25647	2021-10-13 17:52	2021-01-14	Show	GitHub Exploit DB Packet Storm

133128	5.3	警告 Network	GoDaddy Operating Company	node-config-shield	Node.js 用 GoDaddy node-config-shield における動的に操作されるコードリソースの不適切な制御に関する脆弱性	CWE-913 動的に操作されるコードリソースの不適切な制御	CVE-2021-26276	2021-10-13 17:52	2021-01-22	Show	GitHub Exploit DB Packet Storm

133129	5.3	警告 Network	JetBrains	Hub	JetBrains Hub における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2021-25760	2021-10-13 17:48	2021-02-3	Show	GitHub Exploit DB Packet Storm

133130	8.8	重要 Network	JetBrains	YouTrack	JetBrains YouTrack におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2021-25765	2021-10-13 17:31	2021-02-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
461	6.5	MEDIUM Adjacent	-	-	lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove() to shift th… New	CWE-125 Out-of-bounds Read	CVE-2026-46433	2026-06-10 08:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

462	7.5	HIGH Network	-	-	SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provide SQL queries to be l… New	CWE-400 Uncontrolled Resource Consumption	CVE-2026-46374	2026-06-10 08:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

463	7.5	HIGH Network	-	-	SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be l… New	CWE-674 Uncontrolled Recursion	CVE-2026-46373	2026-06-10 08:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

464	-		-	-	A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user. New	CWE-502 Deserialization of Untrusted Data	CVE-2026-44963	2026-06-10 08:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

465	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New	-	CVE-2026-10238	2026-06-10 08:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

466	5.4	MEDIUM Network	-	-	A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted pa… New	CWE-79 Cross-site Scripting	CVE-2026-36728	2026-06-10 07:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

467	8.1	HIGH Network	-	-	Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type. New	CWE-284 Improper Access Control	CVE-2026-36720	2026-06-10 07:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

468	6.1	MEDIUM Network	-	-	OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through th… New	CWE-79 Cross-site Scripting	CVE-2026-34417	2026-06-10 07:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

469	9.8	CRITICAL Network	-	-	An issue was discovered in bitbank2 AnimatedGIF v2.2.0. A buffer overflow in the DecodeLZW function allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code … New	CWE-120 Classic Buffer Overflow	CVE-2026-30141	2026-06-10 07:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

470	6.1	MEDIUM Network	-	-	OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embeddi… New	CWE-79 Cross-site Scripting	CVE-2026-25860	2026-06-10 07:16	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed